RUFADAA: The Law That Governs Your Executor's Access to Digital Accounts

What RUFADAA Does — and What It Does Not

| ContentWhat It Means in Practice** | | --- | --- | | Legal authority for fiduciaries | Executors, trustees, and agents under a power of attorney have legal authority to manage digital assets as part of their fiduciary duties — they are not 'hacking' or violating the Computer Fraud and Abuse Act when acting within their role | | Catalog access (default) | Without explicit permission from the account holder, a fiduciary can access the 'catalog' of digital communications — essentially metadata: from/to addresses, timestamps, subject lines — but NOT the content of emails, texts, or messages | | Content access (requires explicit permission) | To access the actual content of emails, messages, or communications, the deceased must have explicitly authorized this in their will, trust, or power of attorney — or through the platform's own legacy tool (which takes precedence over everything else) | | Platform tools take priority | A platform's own legacy tool (Google Inactive Account Manager, Facebook Legacy Contact, Apple Digital Legacy) takes priority over RUFADAA, the will, and even court orders. The account holder's online tool choice is supreme. | | Platforms can require documentation | Custodians (platforms) under RUFADAA can: request court orders; charge reasonable fees for compliance; limit compliance to information 'reasonably necessary' for estate settlement; and refuse unduly burdensome requests | | Does not override Terms of Service entirely | RUFADAA does not make every platform's Terms of Service irrelevant. Platforms are required to comply with fiduciary requests — but they retain significant discretion in how they do so |

The Three-Tier Priority Hierarchy

RUFADAA establishes a clear priority order for how digital assets are managed after death. Understanding this hierarchy is essential for both planning and for executors facing resistance from platforms.

| ContentSourceContentWhat It Controls** | | --- | --- | --- | | Tier 1 — Highest Priority | Platform's own legacy/online tool (e.g., Google Inactive Account Manager; Facebook Legacy Contact; Apple Digital Legacy) | Whatever the account holder set up in the platform's built-in tools controls — overriding the will, trust, RUFADAA, and even court orders in most cases. This is why platform-specific setup is the most powerful planning tool. | | Tier 2 | The account holder's will, trust, or power of attorney (if it explicitly addresses digital accounts) | If no platform tool was set up, a clear provision in a will or trust authorizing the executor/trustee to access specific digital accounts gives the fiduciary legal authority under RUFADAA. Must be specific — general 'all my assets' language may not be sufficient. | | Tier 3 — Default | Platform's Terms of Service | If neither Tier 1 nor Tier 2 applies, the platform's ToS governs. Many platforms' ToS state accounts are non-transferable and terminate at death (Yahoo, Verizon). Some give limited fiduciary access. This is the worst outcome — the executor has minimal legal leverage and must rely on the platform's discretion. |

Which States Have Adopted RUFADAA

| ContentStatesContentWhat This Means for Estates** | | --- | --- | --- | | RUFADAA Adopted (46 states + DC) | Alabama, Alaska, Arizona, Arkansas, California, Colorado, Connecticut, Delaware (UFADAA version), Florida, Georgia, Hawaii, Idaho, Illinois, Indiana, Iowa, Kansas, Kentucky, Maine, Maryland, Michigan, Minnesota, Mississippi, Missouri, Montana, Nebraska, Nevada, New Hampshire, New Jersey, New Mexico, New York, North Carolina, North Dakota, Ohio, Oregon, Pennsylvania, Rhode Island, South Carolina, South Dakota, Tennessee, Texas, Utah, Vermont, Virginia, Washington, West Virginia, Wisconsin, Wyoming + DC | Executors have a legal framework for requesting digital account access; courts can enforce compliance | | RUFADAA NOT Adopted | Louisiana, Massachusetts, Oklahoma | No specific statutory framework for fiduciary digital access; executors must rely on case-by-case negotiations with platforms, platform ToS, and general estate law principles; outcomes are more uncertain |

RUFADAA Does Not Override the Stored Communications Act

Federal law — specifically the Electronic Communications Privacy Act (ECPA) and its Stored Communications Act (SCA) provisions — prohibits service providers from disclosing the content of stored communications without user consent. RUFADAA was carefully written to work within these federal constraints. This is why content access still requires explicit prior authorization from the account holder — even an executor with Letters Testamentary cannot force Gmail to hand over email content without the deceased's prior consent via a will provision or platform tool.

How to Plan Using RUFADAA (For Estate Planning Purposes)

If you are reading this article while doing your own estate planning — not dealing with a deceased loved one's estate — here is what RUFADAA means for your planning decisions:

1. Set up platform tools first (Tier 1): Google Inactive Account Manager, Apple Legacy Contact, and Facebook Legacy Contact are your most powerful tools. They override your will and RUFADAA. Set them up today.
2. Add explicit digital asset provisions to your will and/or trust: Name a 'Digital Executor' or authorize your existing executor by name to access, manage, and distribute specific digital accounts. Include specific account names (Gmail, iCloud, PayPal) or give blanket authorization for all digital accounts.
3. Create a digital asset inventory document: list all significant accounts with login information (stored securely — password manager or sealed envelope with estate attorney). Your executor cannot manage what they cannot find.
4. Specify your wishes for each account: Do you want your Facebook memorialized or deleted? Your email archive preserved or deleted? Your PayPal balance transferred to your estate? Make these decisions explicit.
5. Review annually: Platform policies change, accounts are added and removed, and passwords change. Update your digital estate plan at least once per year.